Feed openbsd-journal OpenBSD Journal

Favorite IconOpenBSD Journal

Link http://undeadly.org/
Feed http://undeadly.org/cgi?action=rss
Updated 2024-12-03 19:01
p2k18 Hackathon report: Peter Hessler on wifi nwid switching
Peter Hessler (phessler@) writes about his time in Nantes:
p2k18 Hackathon Report: Eric Faurot on e-mail and printing
Eric Faurot (eric@) is next with his report on what he did in Nantes:
p2k18 Hackathon Report: Stefan Sperling on ports and wireless improvements
Stefan Sperling (stsp@) kindly sent in a report on his activities around p2k18:
p2k18 Hackathon report: Christian Weisgerber (naddy@) On clang 6 fallout, doing the right thing, and fixes for aarch64
Our next p2k18 report comes from Christian "naddy" Weisgerber, who writes:
p2k18 Hackathon Report: Landry Breuil on USB, pledging firefox, and much more
Landry Breuil (landry@) has an extensive report for our readers:
p2k18 Hackathon report: Jasper Lievisse Adriaanse (jasper@) on Gnome 3.28, gobject-introspection and crpes
Next up with a p2k18 report is Jasper Lievisse Adriaanse (jasper@):
p2k18 Hackathon report: Bob Beck on pledge, non-pledge and soon to be revealed goodies
Next up with a p2k18 report is Bob Beck (beck@):
p2k18 Hackathon Report: Ken Westerback on dhclient and disklabel
Next up is the report from Ken Westerback (krw@):
p2k18 Hackathon report: Gilles Chehade on organizing a hackathon and OpenSMTPD
The latest p2k18 hackathon report comes from Gilles Chehade (gilles@),who writes:
p2k18 Hackathon report: Philip Guenther on low level amd64 development and more
As more and more developers arrive back home from France, more reports arrive to you to keep you informed of what happened in Nantes. This time, it's Philip Guenther (guenther@) who writes in with his report:
p2k18 Hackathon Report: Klemens Nanni on ports and pledges
Next up in our series of p2k18 reports is that from Klemens Nanni (kn@):
p2k18 Hackathon report: Marc Espie (espie@) on pkg_* and packages progress
Here is another report from the just concluded p2k18 hackathon, from Marc Espie (espie@), who writes:
p2k18 Hackathon report: Solene Rapenne (solene@) on joining the project, packages progress
Spectre Variant 2 mitigation for kernel committed to -current
Working at p2k18, Theo de Raadt (deraadt@) hascommittedSpectre Variant 2 mitigations:
SMTP client added to -current
Working at p2k18, Eric Faurot (eric@) hascommitteda simple SMTP client to -current:
OpenBSD Community Goes Gold for 2018!
Ken Westerback (krw@ when wearing his developer hat) writes:
Hardware accelerated AES/HMAC-SHA on octeons
In this commit, visa@ submitted code (disabled for now) to use built-in accelerationon octeon CPUs, much like AESNI for x86s.I decided to test tcpbench(1) and IPsec, before and after updating and enabling the octcrypto(4) driver.Read more…
MAP_STACK Stack Register Checking Committed to -current
The MAP_STACK anti-ROP mechanism described in a recentarticlehas beencommittedto-current.Thecommit messageincludes:
Transparent network audio with mpd & sndiod
Landry Breuil (landry@ when wearing his developer hat) wrotein…
OpenBSD 6.3 Released
April 2, 2018: The OpenBSDproject has announced the availability of the newest release,OpenBSD 6.3:
Stack-register Checking
Recently, Theo de Raadt (deraadt@)describeda new type of mitigation he has been working on together with Stefan Kempf (stefan@):
Mike Larkin at bhyvecon 2018: OpenBSD vmm(4) update
Mike Larkin (mlarkin@) has just given a presentation atbhyvecon Tokyo 2018.The slides are nowavailable (as PDF).In addition to the excellent summary of the state-of-play forvmmand friends, the presentation offers a tantalizing glimpse at possible futuredirections.Update: videois available
syspatches will be provided for both supported releases
Good news for people doing upgrades only once per year: syspatches will be provided for both supported releases. The commit from T.J. Townsend (tj@) speaks for itself:
a2k18 Hackathon Report: Ken Westerback on dhclient and more
Ken Westerback (krw@) has sent in the first report from the (recently concluded) a2k18 hackathon:
Meltdown-mitigation syspatch/errata now available
The recent changes in -current mitigating the Meltdown vulnerability have been backported to the6.1 and6.2(amd64) releases, and thesyspatch update (for 6.2) is now available.Happy syspatching, and don't forget to show your appreciation bydonating to the project.
Meltdown fix committed by guenther@
Meltdown mitigation is coming to OpenBSD. Philip Guenther (guenther@) has just committed a diff that implements a new mitigation technique to OpenBSD: Separation of page tables for kernel and userland. This fixes the Meltdown problems that affect most CPUs from Intel. Both Philip and Mike Larkin (mlarkin@) spent a lot of time implementing this solution, talking to various people from other projects on best approaches.In the commit message, Philip briefly describes the implementation:Read more…
a2k18 Hackathon preview: Syncookies coming to PF
As you may have heard, the a2k18 hackathon is in progress. As can be seen from the commit messages, several items of goodness are being worked on.One eagerly anticipated item is the arrival of TCP syncookies (read: another important tool in your anti-DDoS toolset) in PF. Henning Brauer (henning@) added the code in a series of commits on February 6th, 2018, with this one containing the explanation:Read more…
Remi Locherer's EuroBSDcon 2017 Talk
Remi Locherer wrote in:
The OpenBSD Foundation 2018 Fundraising Campaign
Details of the2018 campaign have been added to the Foundation's website. The goal for theyear is for $300,000. The total for "smaller" donations has alreadytaken the OpenBSD community to bronze level sponsorship!Please show your support by contributing.
CPU microcode update code for amd64
Patrick Wildt (patrick@) recently committed some code that will update the Intel microcode on many Intel CPUs, a diff initially written by Stefan Fritsch (sf@). The microcode of your CPU is basically the firmware that runs on your (Intel) processor, defining its instruction set in terms of so called "microinstructions". The new code depends, of course, on the corresponding firmware package, ported by Patrick which can be installed using a very recent fw_update(1). Of course, this all plays into the recently revealed problems in Intel (and other) CPUs, Meltdown and Spectre.Read more…
Handling of CPU bugs disclosure 'incredibly bad': OpenBSD's de Raadt
ITWirehas publishedan articleregarding Theo de Raadt's (deraadt@) reaction to theMeltdown/Spectre disclosures.One choice quote reads:
OpenBSD-current now has 'smtpctl spf walk'
If you run a mail service, you probably like to have greylisting in place, via spamd(8) or similar means. However, there are some sites that simply do not play well with greylisting, and for those it's useful to extract SPF information to identify their valid outgoing SMTP hosts. Now OpenBSD offers a straightforward mechanism to do that and fill your nospamd table, right from the smtpctl utility via the subcommand spf walk. Gilles Chehade (gilles@) describes how in a recent blog post titled spfwalk.This feature is still in need of testing, so please grab a snapshot and test!
Response to the "Meltdown" Vulnerability
Amessage to tech@from Philip Guenther (guenther@) provides the first publicinformation from developers regarding the OpenBSD response to the recentlyannouncedCPU vulnerabilities:
BSDCAN2017 Interview with Peter Hessler, Reyk Floeter, and Henning Brauer
In amessage to misc@,Tom Smyth wrote (in part):
pledge() work in progress
In amessage to tech@,Theo de Raadt (deraadt@) provided some insights into ongoingwork on pledge(2):
arm64 platform now officially supported [and has syspatch(8)]
arm64 is now anofficially supported platform for OpenBSD.As some readers will have noticed,there's nowsyspatch(8) support, too.Theo de Raadt (deraadt@) committed the following change:
s2k17 Hackathon Report: Stefan Sperling (stsp@) on wireless (iwm(4), athn(4) and more) progress
Reflections on Hackathons
Bob Beck (beck@) writes:
p2k17 Hackathon report: Antoine Jacoutot on ports+packages progress
Another p2k17 hackathon report is just in, from Antoine Jacoutot (ajacoutot@), who writes:
Official OpenBSD 6.2 CD set - the only one to be made!
Our dear friend Bob Beck (beck@) writes:
p2k17 Hackathon report: Florian Obser on network stack progress, kernel relinking and more
A new p2k17 hackathon report has arrived, this one from Florian Obser, who writes:
p2k17 Hackathon Report: Landry Breuil on Mozilla things and much more
Landry Breuil (landry@) sent in our next report from the recent ports hackathon:
p2k17 Hackathon Report: Anthony J. Bentley on firmware, games and securing pkg_add runs
The next p2k17 report comes from Anthony J. Bentley (bentley@):
p2k17 Hackathon report: Sebastian Reitenbach on Puppet progress
The next p2k17 report comes from Sebastian Reitenbach (sebastian@):
p2k17 Hackathon report: Christian Weisgerber on random devices, build failures and gettext
The latest hackathon report to come in today came from Christian Weisgerber (naddy@):
p2k17 Hackathon report: Jeremy Evans on ruby progress, postgresql and webdriver work
The p2k17 hackathon reports keep flowing in, here's one from Jeremy Evans (jeremy@):
Paul Irofti (pirofti@) on hotplugd(8), math ports, xhci(4) and other kernel advancements
Here is a new p2k17 hackathon report from Paul Irofti (pirofti@), who writes:
p2k17: Herzliche grusse vom Berlin (espie@ on mandoc, misc packages progress)
A new p2k17 hackathon report is in, from Marc Espie, who writes:
p2k17 Hackathon Report: Matthias Kilian on xpdf, haskell, and more
The p2k17 hackathon has concluded, and we have our first report.Matthias Kilian (kili@) wrote in:
syspatch(8) Binary Updates Now for the Latest Release Only
In amessage to tech@,Theo de Raadt (deraadt@) wrote:
...78910111213141516...